I'm trying to restrict access to a specific URL. It should not allowed to access /admin.php.
frontend example acl restricted_page path_beg -i /admin\.php http-request deny if restricted_page
This works fine, HAProxy is blocking access to this URL. But when I enter http://example.org/ad%6Din.php (%6D = hexcode for "m"), HAProxy is not restricting access.
What is the best way to do this?
- Is there a option in HAProxy or do I need to specify a regluar expression matching "admin.php" as plaintext and/or url-encoded?
- Are there any other ways to bypass the restriction?